diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 61adf18..44adf0e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,6 +21,6 @@ jobs:
         run: make STRFTIME_TAGS=${{ matrix.tags }} cover
       - name: Upload code coverage to codecov
         if: matrix.go == '1.23'
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238  # v4.6.0
+        uses: codecov/codecov-action@288befbd1044bd1756afb0bdae077549e0ddb31f  # v5.0.5
         with:
           file: ./coverage.out